Automated security hangar for private cellular networks

Abstract

The described technology is generally directed towards an automated security hangar for private cellular networks. In response to detecting that a user equipment is departing a geographic area served by a private cellular network, the user equipment can encrypt its data and send it to a private cellular network server. The server can receive and securely store the encrypted data, and the server can provide a code to the user equipment. The user equipment can store the code, disconnect from the private cellular network, and depart the geographic area. When the user equipment returns to the geographic area and reconnects to the private cellular network, the user equipment can present the code to the server. The server can validate the code, the user equipment, and/or the operator of the user equipment, and the server can return the encrypted data to the user equipment.

What is claimed is: 
     
         1 . A method comprising:
 receiving, by a user equipment comprising a processor, departure data indicative of a predicted departure of the user equipment from a geographic area served via a private cellular network;   generating, by the user equipment, an encryption key that is local to the user equipment, in response to the determining the predicted departure;   encrypting, by the user equipment, a user equipment parameter using the encryption key that is local to the user equipment, resulting in an encrypted user equipment parameter;   sending, by the user equipment, the encrypted user equipment parameter to a private cellular network server that is part of the private cellular network, wherein the encrypted user equipment parameter is sent to the private cellular network without the encryption key;   deleting, by the user equipment, the user equipment parameter from the user equipment;   receiving, by the user equipment, a code generated by the private cellular network server; and   storing, by the user equipment, the code for subsequent use by the user equipment in connection with re-acquiring the encrypted user equipment parameter from the private cellular network server.   
     
     
         2 . The method of  claim 1 , further comprising:
 providing, by the user equipment, the code to the private cellular network server in order to re-acquire the encrypted user equipment parameter.   
     
     
         3 . The method of  claim 1 , wherein the user equipment parameter is associated with a first user equipment persona, and further comprising initiating, by the user equipment, use of a second user equipment persona subsequent to the predicted departure of the user equipment from the geographic area. 
     
     
         4 . The method of  claim 1 , wherein the receiving the departure data comprises receiving the departure data from a private cellular network controller. 
     
     
         5 . The method of  claim 4 , wherein the departure data from the private cellular network controller is based on a signal strength of the user equipment associated with the private cellular network. 
     
     
         6 . The method of  claim 1 , wherein the user equipment parameter comprises network configuration data for the private cellular network. 
     
     
         7 . The method of  claim 1 , wherein the storing the code is performed by an anti-cloning process executable by the user equipment. 
     
     
         8 . A user equipment comprising:
 a processor; and   a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, the operations comprising:
 receiving departure data indicative of a predicted departure of the user equipment from a geographic area served via a private cellular network; 
 generating an encryption key that is local to the user equipment, in response to the determining the predicted departure; 
 encrypting a user equipment parameter using the encryption key that is local to the user equipment, resulting in an encrypted user equipment parameter; 
 sending the encrypted user equipment parameter to a private cellular network server that is part of the private cellular network, wherein the encrypted user equipment parameter is sent to the private cellular network without the encryption key; 
 deleting the user equipment parameter from the user equipment; 
 receiving a code generated by the private cellular network server; and 
 storing the code for subsequent use by the user equipment in connection with re-acquiring the encrypted user equipment parameter from the private cellular network server. 
   
     
     
         9 . The user equipment of  claim 8 , the operations further comprising:
 providing the code to the private cellular network server in order to re-acquire the encrypted user equipment parameter.   
     
     
         10 . The user equipment of  claim 8 , wherein the user equipment parameter is associated with a first user equipment persona, and further comprising initiating, by the user equipment, use of a second user equipment persona subsequent to the predicted departure of the user equipment from the geographic area. 
     
     
         11 . The user equipment of  claim 8 , wherein the receiving the departure data comprises receiving the departure data from a private cellular network controller. 
     
     
         12 . The user equipment of  claim 11 , wherein the departure data from the private cellular network controller is based on a signal strength of the user equipment associated with the private cellular network. 
     
     
         13 . The user equipment of  claim 8 , wherein the user equipment parameter comprises network configuration data for the private cellular network. 
     
     
         14 . The user equipment of  claim 8 , wherein the storing the code is performed by an anti-cloning process executable by the user equipment. 
     
     
         15 . A non-transitory machine-readable medium, comprising executable instructions that, when executed by a processor of a user equipment, facilitate performance of operations, the operations comprising:
 receiving departure data indicative of a predicted departure of the user equipment from a geographic area served via a private cellular network;   generating an encryption key that is local to the user equipment, in response to the determining the predicted departure;   encrypting a user equipment parameter using the encryption key that is local to the user equipment, resulting in an encrypted user equipment parameter;   sending the encrypted user equipment parameter to a private cellular network server that is part of the private cellular network, wherein the encrypted user equipment parameter is sent to the private cellular network without the encryption key;   deleting the user equipment parameter from the user equipment;   receiving a code generated by the private cellular network server; and   storing the code for subsequent use by the user equipment in connection with re-acquiring the encrypted user equipment parameter from the private cellular network server.   
     
     
         16 . The non-transitory machine-readable medium of  claim 15 , the operations further comprising:
 providing the code to the private cellular network server in order to re-acquire the encrypted user equipment parameter.   
     
     
         17 . The non-transitory machine-readable medium of  claim 15 , wherein the user equipment parameter is associated with a first user equipment persona, and further comprising initiating, by the user equipment, use of a second user equipment persona subsequent to the predicted departure of the user equipment from the geographic area. 
     
     
         18 . The non-transitory machine-readable medium of  claim 15 , wherein the receiving the departure data comprises receiving the departure data from a private cellular network controller. 
     
     
         19 . The non-transitory machine-readable medium of  claim 18 , wherein the departure data from the private cellular network controller is based on a signal strength of the user equipment associated with the private cellular network. 
     
     
         20 . The non-transitory machine-readable medium of  claim 15 , wherein the user equipment parameter comprises network configuration data for the private cellular network.